Damage RansomwareMalware
This is most likely to affect English speaking users, since the note is written in English. English is understood worldwide, thus anyone can be harmed. The hacker spread the virus using email spam, fake updates, and harmful attachments. All your files are compromised including music, MS Office, Open Office, pictures, videos, shared online files etc.. Written in DelphiFrom MISP Galaxy
Last reported 2 months ago, by Group-IB1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1195Supply Chain Compromise
“The BEC that would have followed — the lateral phishing, the invoice fraud, the supply chain compromise — never materializes.”
- T1219Remote Access Tools
“Beyond email credentials, Group-IB Threat Intelligence also tracks compromised accounts for remote access tools like TeamViewer, AnyDesk, LogMeIn, Chrome Remote Desktop, and Parsec, which threat actors frequently use as alternative entry points after credential theft.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
No Room For Compromise: How Business Email Protection Predicts BEC Before It Starts“Stage 5: Damage. Ransomware deployment, data exfiltration, or financial fraud.”
Thanks — we review every report.